All, Appears I can do 'kinit' indefinitely (failed login attempt) and kdc does not lock account :( Please let me know if anyone has thought about this problem and has a solution. regards, subu